High · published December 1, 2025
🚨 A rogue packet is all it takes! This denial of service vulnerability in Socomec DIRIS Digiware M-70 can be triggered by sending a crafted Modbus TCP packet on port 502, no authentication required! ⚡ Think of it like a sneaky prankster throwing a well-aimed balloon filled with water at a power box — a simple throw can cause an entire electrical outage, disrupting service for everyone connected. If an attacker successfully sends this malicious packet, they can bring down the device, leading to downtime and disruption of services. This could mean a significant impact on operations and data flow, especially in critical environments — absolutely devastating!
Think of it like a sneaky prankster throwing a well-aimed balloon filled with water at a power box — a simple throw can cause an entire electrical outage, disrupting service for everyone connected. This vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality, allowing an unauthenticated attacker to send a specially crafted packet that triggers a denial of service condition.
If an attacker successfully sends this malicious packet, they can bring down the device, leading to downtime and disruption of services. This could mean a significant impact on operations and data flow, especially in critical environments — absolutely devastating! To protect against this, update to version 1.6.10 or later of the Socomec DIRIS Digiware M-70 firmware. Additionally, consider firewall rules to restrict access to port 502 from untrusted sources. Don't delay — patch immediately! You've got this! With these steps, you can fortify your defenses and keep your systems safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |